Static task
static1
Behavioral task
behavioral1
Sample
5300600f6031944abca7134d4a88c43e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5300600f6031944abca7134d4a88c43e.exe
Resource
win10v2004-20231215-en
General
-
Target
5300600f6031944abca7134d4a88c43e
-
Size
580KB
-
MD5
5300600f6031944abca7134d4a88c43e
-
SHA1
5187cb60c15e1b80b75b5875e929da0f40f0d4da
-
SHA256
5cbac0c69df570cae4b3f2995f9c373263e1a534e4b0eb9fd4e4eccd8bd280e8
-
SHA512
bd0025c921af3f391f199d0c1ea5c4a776dfdaac5d01a645eee4dda22534be72ec7493b96d887b8a84d33f7883782e6324d1a37e92ec9e149c6c427797f52f4e
-
SSDEEP
6144:4ylUlGJ3T51yRlo7Ed+rvE6p89yOU69kXH0sPD2IUepbqtyF9lL71Z2p4fHS8fYD:BUy1A+fr5Q7kXHLPD2Zli9lqp4fHS8A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5300600f6031944abca7134d4a88c43e
Files
-
5300600f6031944abca7134d4a88c43e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 440KB - Virtual size: 603KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 831KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ